Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          BIm0TNWLTBeUsuYnwYuAus1WsUuJb9b0dcuYx1HHTp8=
Subject key identifier:   CA:CC:55:E1:90:04:12:B3:F1:C2:87:C2:34:81:CA:C7:41:5D:43:1F
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       01A0890BF599419D0B4F3BE9F2F697AFBBE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          0247
Signing time:             Thu 10 Sep 2026 02:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 02:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 02:00:57 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: FyYhPK0/Kv7L2WEvyu/9BJoRGG48GaMORVvivaruq2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0b:f5:99:41:9d:0b:4f:3b:e9:f2:f6:97:af:bb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Sep 10 02:00:57 2026 GMT
            Not After : Sep 11 02:00:57 2026 GMT
        Subject: CN=cacc55e1900412b3f1c287c23481cac7415d431f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b6:3e:ed:9a:18:94:0a:30:7c:8a:b8:af:b1:
                    98:e8:da:25:30:64:bb:80:85:2d:c0:44:64:31:64:
                    ca:92:8f:85:0e:5b:31:6e:b5:0b:df:41:b9:04:32:
                    15:f5:b4:09:d5:3b:5b:50:fc:18:d3:c4:12:fd:d3:
                    c2:ff:b8:20:77:e5:bd:ab:13:fe:73:88:20:07:52:
                    d2:78:59:4d:e0:86:61:28:47:ca:27:e2:9a:d0:60:
                    f8:84:b9:18:37:25:89:ee:de:a8:bd:ee:ec:47:83:
                    71:a5:ee:55:40:3a:9d:c5:92:42:aa:a7:cf:56:63:
                    3b:36:01:2b:28:21:ed:01:7d:9f:c6:dc:27:18:3b:
                    40:73:80:0f:c5:1c:67:c9:0d:c5:a2:42:e1:38:d3:
                    3e:61:4f:16:78:2a:d6:50:ba:b3:93:cf:d7:03:a8:
                    b7:50:8e:1c:82:bf:33:c1:be:59:e8:2a:84:44:2f:
                    e8:c4:f2:53:da:30:a7:d1:f2:e8:36:1d:87:e7:c0:
                    69:f5:c0:c0:29:bc:4c:e1:2c:fd:55:d7:ec:62:b7:
                    df:e4:5b:f5:74:9e:6c:a8:6d:65:6d:57:7f:2e:16:
                    1c:a2:98:b2:26:ce:ea:88:5e:e9:82:c2:42:17:e3:
                    28:63:ea:2e:72:cd:17:d3:b7:aa:c7:0a:fc:57:24:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:55:E1:90:04:12:B3:F1:C2:87:C2:34:81:CA:C7:41:5D:43:1F
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:25:96:f8:5b:c3:59:99:6f:62:40:07:b5:52:5d:16:15:df:
         64:cd:f1:ea:48:83:ac:93:ce:78:5c:96:35:7c:b3:e6:79:6e:
         95:ff:a8:e5:df:ad:ff:d9:27:26:ab:b1:15:d3:fe:cf:42:6f:
         5d:d6:4c:d0:bc:e4:69:b5:24:98:68:68:db:73:58:60:9e:c5:
         0c:9f:38:23:3e:99:ee:f7:1c:b2:41:d0:84:0b:17:30:37:ff:
         e3:07:4d:9b:a7:79:0f:99:5e:c9:1a:b8:56:8e:df:b5:0a:69:
         25:a7:c6:51:ea:09:79:08:6b:a6:8e:bc:de:a8:4f:62:b7:11:
         7a:7c:a4:61:73:e3:a0:51:8e:23:6b:8b:b5:a8:20:82:b1:b6:
         b0:7a:a0:a2:20:78:74:24:26:2a:d7:0e:10:12:08:34:61:fc:
         1c:c8:d7:b4:43:e4:54:56:8d:04:eb:34:5c:46:89:38:15:a8:
         8e:7b:fd:e1:df:09:a9:de:5b:f1:f2:83:16:74:7c:20:1a:46:
         1a:5f:75:61:78:82:66:36:4e:06:e6:68:e8:a8:af:10:8e:d3:
         60:e4:f1:b9:00:b2:76:79:5a:40:21:38:fd:ad:f5:be:cb:cb:
         d1:fc:4d:f1:b3:9c:22:1e:9b:e2:4e:8b:4f:82:dd:c9:0e:b3:
         7d:53:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:47 2026 by rpki-client